I85PREP
⌘ K
ESDP study materials
ESDP study resources

ESDP practice questions

One question at a time. Build your ESDP understanding.

First 50 of 190 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1ArcGIS Enterprise components, service roles and architecture boundaries

In ArcGIS Enterprise system design, a non-functional requirement (NFR) is best described as a requirement that specifies:

  1. Quality attributes such as performance, availability, scalability, and security that the system must meet Correct answer.
  2. The list of web maps and dashboards to be published in the portal
  3. The names of the staff who will administer the deployment
  4. The specific GIS workflows and feature layers users must be able to edit

Explanation

Non-functional requirements define how the system must perform rather than what it does. In ArcGIS Enterprise design they include performance (response time, throughput), availability, scalability, security, and capacity targets, and they drive physical architecture decisions. Functional requirements, by contrast, describe specific user workflows and features.

Question 2ArcGIS Enterprise components, service roles and architecture boundaries

For the explicitly versioned ArcGIS Enterprise11.1 Windows/Linux base-deployment teaching example, which listed set names the four software product-component types, rather than counting individual instances?

  1. ArcGIS Server, a load balancer, a relational database, and ArcGIS Reader
  2. Portal for ArcGIS, ArcGIS GIS Server (hosting server), ArcGIS Data Store, and ArcGIS Web Adaptor Correct answer.
  3. ArcGIS Pro, ArcGIS Online, ArcGIS Server, and ArcGIS Monitor
  4. Portal for ArcGIS, ArcGIS Image Server, ArcGIS Notebook Server, and ArcGIS Mission Server

Explanation

The keyed set names the four product-component types in the stated historical11.1example, with separate Web Adaptor instances for portal and hosting server. It is not a timeless current completeness claim:current documentation also specifies object storage and supports a third-party load-balancer alternative under its requirements.

Question 3ArcGIS Enterprise components, service roles and architecture boundaries

In an ArcGIS Enterprise deployment, what is the primary role of the ArcGIS Web Adaptor?

  1. To act as the relational database for the geodatabase
  2. To store published hosted feature layer data
  3. To integrate the portal and server with an organization's web server and provide a friendly, port-free URL Correct answer.
  4. To execute geoprocessing tools on a schedule

Explanation

A supported Web Adaptor integrates relevant portal/server traffic with a web-server path and can avoid exposing an explicit internal service port in the public URL. The URL still uses an actual network port;port-free does not literally mean no port or automatic correct TLS/security. Supported proxy alternatives and actual version configuration matter.

Question 4ArcGIS Enterprise components, service roles and architecture boundaries

In ArcGIS Enterprise, which URL is the correct fully qualified administrative endpoint pattern for Portal for ArcGIS through a web adaptor?

  1. https://datastore.domain.com/relational
  2. https://gisserver.domain.com/server/admin
  3. https://webgis.domain.com/portal/portaladmin Correct answer.
  4. https://webgis.domain.com:6080/arcgis/rest

Explanation

When accessed through a web adaptor, the Portal for ArcGIS administrative directory uses the pattern https://webgis.domain.com/<portal-web-adaptor>/portaladmin. Recognizing the distinct portal, server, and admin URLs is part of documenting and troubleshooting an ArcGIS Enterprise deployment.

Question 5ArcGIS Enterprise components, service roles and architecture boundaries

Which ArcGIS Data Store type is purpose-built to ingest and store high-volume, time-enabled observation data from sensors and IoT feeds?

  1. Object store
  2. Relational data store
  3. Tile cache data store
  4. Spatiotemporal big data store Correct answer.

Explanation

The spatiotemporal big data store is designed for high-volume, time-series observation data such as sensor and IoT feeds, and it backs ArcGIS GeoEvent and Velocity (real-time) workloads. Choosing the correct data store type for the workload is a core physical-architecture decision.

Question 6ArcGIS Enterprise components, service roles and architecture boundaries

When documenting a physical architecture diagram for ArcGIS Enterprise, which set of elements should be represented?

  1. The personal preferences of each end user
  2. Only the portal home page layout
  3. Machines/roles, networking and load balancers, data stores, security boundaries, and the request/data flows between them Correct answer.
  4. A list of blog posts about GIS

Explanation

A physical architecture diagram documents the machines and their roles, networking and load-balancing, data stores, security zones/boundaries, and how requests and data flow between tiers. This documentation lets the design be validated against non-functional requirements and supports troubleshooting.

Question 7ArcGIS Enterprise components, service roles and architecture boundaries

Which approach best provides high availability for the hosting ArcGIS Server site in a base deployment?

  1. Two or more server machines joined into one site, fronted by a load balancer or web adaptors Correct answer.
  2. Running the server on the end user's laptop
  3. Storing the server configuration only in a spreadsheet
  4. A single server machine with a large amount of RAM

Explanation

An ArcGIS Server site achieves high availability by joining two or more machines into a single site so that if one machine fails the others continue serving requests, with a load balancer or web adaptors distributing traffic. The configuration store is shared across the site machines.

Question 8ArcGIS Enterprise components, service roles and architecture boundaries

A scenario requires that internal employees and external public users reach the same maps but through different entry points with different security. Which physical design pattern best supports this?

  1. Disabling HTTPS to simplify access
  2. Giving every public user a named-user portal account
  3. A single web adaptor exposed directly to the public internet for all users
  4. A reverse proxy / DMZ pattern that exposes a controlled external endpoint while internal users use an internal endpoint Correct answer.

Explanation

Exposing the deployment through a reverse proxy in a DMZ provides a controlled external entry point, separate from the internal endpoint, with the security tier (firewall, proxy) mediating public access. This separates external and internal traffic paths while serving the same back-end content.

Question 9ArcGIS Enterprise components, service roles and architecture boundaries

In documenting ArcGIS Enterprise URLs, which endpoint represents the ArcGIS Server site administrator directory accessed through its web adaptor?

  1. https://webgis.domain.com/server/admin Correct answer.
  2. https://webgis.domain.com/portal/home
  3. https://webgis.domain.com/server/rest/services only
  4. https://datastore.domain.com:2443

Explanation

Through a web adaptor, the ArcGIS Server administrator directory follows https://webgis.domain.com/<server-web-adaptor>/admin. Distinguishing the server admin, server REST, portal home, and portaladmin URLs is essential for documenting and securing the deployment.

Question 10ArcGIS Enterprise components, service roles and architecture boundaries

An architect must show how a request flows through a base deployment fronted by a load balancer. Which order is correct?

  1. Client -> server admin API -> client again
  2. Client -> spreadsheet -> map
  3. Client -> data store -> portal -> server
  4. Client -> load balancer -> web adaptor/portal or server machine -> back-end component Correct answer.

Explanation

A client request first reaches the load balancer (or web adaptor), which forwards it to an available portal or server machine, which then interacts with the appropriate back-end component such as the data store. Documenting this flow validates that each tier is redundant and reachable.

Question 11ArcGIS Enterprise components, service roles and architecture boundaries

In an explicitly Web-Adaptor-based deployment design, why are separate instances configured for the portal and hosting server rather than using one shared instance for both?

  1. Because a single adaptor cannot exceed 10 requests per day
  2. To double the licensing cost intentionally
  3. Because the portal and the hosting server each require their own dedicated web adaptor instance in a base deployment Correct answer.
  4. Because web adaptors cannot serve HTTPS

Explanation

In the supplied Web-Adaptor-based design, one instance is configured with the portal and another with the hosting server. This does not mean every supported current base deployment must use Web Adaptors:current documentation permits a suitable third-party load-balancer alternative under its requirements.

Question 12ArcGIS workload capacity, availability and recoverability

In the supplied simplified capacity model, STis CPU-seconds per request, THis requests per hour and%CPUis a percentage-valued target such as80. Which listed relationship converts these into modeled required cores before whole-resource/failure reserves?

  1. #CPU = TH / (ST x %CPU)
  2. #CPU = (3600 x %CPU) / (ST x TH x 100)
  3. #CPU = (ST x TH x 100) / (3600 x %CPU), adjusted by the SPECrate ratio Correct answer.
  4. #CPU = ST x TH x %CPU x 3600

Explanation

The supplied units give(ST×TH)/(3600×utilization fraction), equivalently(ST×TH×100)/(3600×percentage-valued%CPU), with the stated hardware-normalization factor if applicable. It is a simplified service-demand model, not a complete sizing or availability guarantee. Actual bottlenecks, reserves and surviving capacity require validation.

Question 13ArcGIS workload capacity, availability and recoverability

In a highly available ArcGIS Data Store relational store, what mechanism maintains continuity if the primary machine fails?

  1. A built-in failover in which the standby machine is promoted to become the primary Correct answer.
  2. Round-robin distribution of writes across three equal nodes
  3. Automatic re-creation of the data store from the portal content directory
  4. A manual export and re-import of the geodatabase by the administrator

Explanation

A highly available relational data store is composed of a primary and a standby machine. ArcGIS Data Store includes a built-in failover mechanism: if the primary fails, the standby is automatically promoted to primary, minimizing downtime without administrator intervention.

Question 14ArcGIS workload capacity, availability and recoverability

When a third-party load balancer fronts a highly available portal tier, which configuration best ensures traffic is only sent to healthy machines?

  1. Disable all health checks to reduce latency
  2. Configure health checks that probe each back-end machine and route only to those passing Correct answer.
  3. Pin every user session permanently to the first portal machine
  4. Send all write requests to a standby relational store

Explanation

A load balancer fronting an HA deployment should be configured with health checks that periodically probe each back-end target. Traffic is balanced only among machines that pass the check, typically using a round-robin algorithm, so a failed machine is automatically removed from rotation.

Question 15ArcGIS workload capacity, availability and recoverability

A design team must size the network bandwidth for a service expected to handle 36,000 requests per hour where each request transfers about 1.25 Mb. Using Network bandwidth = TH x Mb-per-request / 3600, what bandwidth is required?

  1. About 25 Mbps
  2. About 45 Mbps
  3. About 100 Mbps
  4. About 12.5 Mbps Correct answer.

Explanation

Network bandwidth = (36,000 x 1.25) / 3600 = 45,000 / 3600 = 12.5 Mbps. Bandwidth sizing complements CPU sizing because even a well-sized server tier can be throttled by an undersized network link, so designers must account for per-request payload size.

Question 16ArcGIS workload capacity, availability and recoverability

Which statement about Virtual Desktop Infrastructure (VDI) for ArcGIS Pro clients is most accurate when designing the system?

  1. ArcGIS Pro benefits from a GPU in the VDI host, and CPU, RAM, and GPU must be sized per concurrent user Correct answer.
  2. VDI is only supported for ArcGIS Online and never for Enterprise
  3. Each VDI session requires its own dedicated physical workstation
  4. VDI eliminates the need to size CPU, RAM, and GPU because rendering is free

Explanation

ArcGIS Pro is graphics-intensive, so VDI hosts should provide GPU acceleration, and CPU, RAM, and GPU resources must be sized for the number of concurrent Pro sessions. Proper VDI sizing prevents poor rendering and slow performance for remote analysts.

Question 17ArcGIS workload capacity, availability and recoverability

An organization needs zero single points of failure in its base ArcGIS Enterprise deployment. Which design satisfies high availability for the portal tier?

  1. A single portal machine with frequent backups
  2. Two portal machines configured for HA, fronted by a load balancer with health checks Correct answer.
  3. One portal machine and two web adaptors
  4. A portal running on the same machine as the data store

Explanation

High availability for the portal tier requires at least two portal machines configured for HA so that one can serve requests if the other fails, fronted by a load balancer (or web adaptors) with health checks. Each tier of the base deployment must be made redundant to eliminate single points of failure.

Question 18ArcGIS workload capacity, availability and recoverability

For this classic dedicated-service-instance teaching model, what does the configured maximum instance count primarily bound per server machine?

  1. The maximum number of concurrent requests that service can process simultaneously per machine Correct answer.
  2. The total disk space allocated to the service cache
  3. The portal's named user license count
  4. The number of web adaptors that can be registered

Explanation

The setting bounds the relevant dedicated service instances in the supplied model and therefore the associated concurrent processing capacity. Actual shared pools, asynchronous work, server role/version, memory and workload behavior can differ. Raising the maximum alone does not prove that the machine can meet the desired response time.

Question 19ArcGIS workload capacity, availability and recoverability

Which design input is required to translate a throughput requirement into server core counts during capacity planning?

  1. The brand of the user's web browser
  2. The average service time per request for the representative service Correct answer.
  3. The number of basemaps in the portal gallery
  4. The color scheme of published web maps

Explanation

Service time, the average seconds the server spends processing a representative request, is an essential input. Combined with the target throughput, maximum CPU utilization, and the SPECrate hardware ratio, it allows the capacity formula to compute required cores.

Question 20ArcGIS workload capacity, availability and recoverability

An architecture must meet a constraint that the database tier cannot be virtualized but the GIS server tier may be. Which adjusted design honors this while preserving high availability?

  1. Eliminate the standby database to save licensing
  2. Run everything on a single virtual machine
  3. Deploy the enterprise geodatabase on a physical HA database cluster and the ArcGIS Server tier on multiple virtual machines behind a load balancer Correct answer.
  4. Move the geodatabase to ArcGIS Online

Explanation

Constraints often dictate that specific tiers use particular infrastructure. Here the geodatabase runs on a physical HA cluster (e.g., primary/standby with failover), while the stateless GIS server tier scales out on virtual machines behind a load balancer, satisfying both the constraint and the availability NFR.

Question 21ArcGIS workload capacity, availability and recoverability

What is the main reason caching directories typically require fast, high-throughput disk I/O in an ArcGIS Enterprise deployment?

  1. They serve large volumes of pre-rendered tiles that are read frequently and benefit from low-latency storage Correct answer.
  2. They hold the system's SSL certificates
  3. They are only used during installation
  4. They store the portal's named user accounts

Explanation

Caching (tile) directories serve many pre-rendered tiles to clients, generating heavy, frequent read I/O. Placing them on fast, high-throughput storage reduces latency and improves map draw performance, which is why disk I/O is a key sizing consideration for cache storage.

Question 22ArcGIS workload capacity, availability and recoverability

A scenario specifies that a remote field office has limited WAN bandwidth but needs fast basemap performance. Which physical design choice most directly addresses this?

  1. Increase the number of named users in the portal
  2. Deliver cached basemaps from a content delivery mechanism or local cache closer to the field office Correct answer.
  3. Add more relational data store nodes at headquarters
  4. Switch all services to dynamic (non-cached) rendering

Explanation

Serving cached tiles from a content delivery mechanism or a cache located closer to the consumers reduces the amount of data crossing the constrained WAN link and improves perceived performance. Locating frequently read content near users is a common content-delivery design pattern.

Question 23ArcGIS workload capacity, availability and recoverability

A target server has a lower per-core SPECrate than the benchmark hardware used to derive service time. How should the capacity calculation be adjusted?

  1. Divide the throughput by the number of users
  2. Subtract the SPECrate difference from the service time
  3. No adjustment is needed because SPECrate is irrelevant
  4. Multiply the computed cores by SPECrate(benchmark)/SPECrate(target), increasing the required core count Correct answer.

Explanation

Under the supplied normalization model, lower target per-core benchmark performance increases the modeled required core count through benchmark/target scaling. This does not guarantee linear application scaling or equivalent memory, I/O and concurrency behavior. Validate actual representative workload assumptions and reserve/failure conditions before an authorized design decision.

Question 24ArcGIS workload capacity, availability and recoverability

An NFR requires 99.9% availability. Which design consideration is MOST directly relevant to achieving it?

  1. Choosing a brighter color ramp for maps
  2. Eliminating single points of failure at every tier through redundancy and failover Correct answer.
  3. Increasing the number of layout templates
  4. Renaming the portal organization

Explanation

Redundancy and supported failover across relevant dependencies address covered availability risks in the stated comparison. A component count alone does not prove99.9%availability or eliminate shared failures, human error and operational limits. Measure the actual service and recovery arrangement against the requirement.

Question 25ArcGIS workload capacity, availability and recoverability

Which factor would MOST increase the number of CPU cores required for a given throughput target?

  1. A higher average service time per request Correct answer.
  2. A higher maximum CPU utilization target
  3. A faster (higher SPECrate) target server
  4. A lower average service time per request

Explanation

In #CPU = (ST x TH x 100) / (3600 x %CPU), required cores are directly proportional to service time, so a higher service time per request increases the cores needed. Lower service time, higher allowed utilization, and faster hardware all reduce the requirement.

Question 26ArcGIS workload capacity, availability and recoverability

An organization wants its ArcGIS Pro analysts to run heavy desktop analysis without moving large datasets across the WAN. Which physical design best achieves this?

  1. Ship external hard drives between offices daily
  2. Provide GPU-enabled VDI sessions co-located with the data center so analysts run Pro next to the data Correct answer.
  3. Email datasets to each analyst
  4. Convert all analysis to printed paper maps

Explanation

Co-locating GPU-enabled VDI sessions in the same data center as the geodatabase lets ArcGIS Pro analysts work directly beside the data, so only the remote display stream crosses the WAN rather than large datasets. This is a standard pattern for data-gravity and bandwidth constraints.

Question 27ArcGIS workload capacity, availability and recoverability

Which statement about memory (RAM) sizing for ArcGIS Server is correct?

  1. RAM is only needed by the portal, never the server
  2. RAM has no impact on service performance
  3. Each running service instance consumes memory, so total RAM must account for the maximum number of concurrent instances plus the OS Correct answer.
  4. Only disk size, never RAM, matters for services

Explanation

Each ArcGIS Server service instance consumes memory while running. Total RAM must cover the maximum concurrent instances across all services on the machine plus operating-system and overhead needs, or the server will page to disk and degrade. RAM sizing therefore pairs with the instance-count plan.

Question 28ArcGIS workload capacity, availability and recoverability

A design must support 200 concurrent ArcGIS Pro users via VDI. Which is the MOST appropriate sizing approach?

  1. Use the same sizing as a single web map viewer
  2. Ignore GPU because Pro is browser-based
  3. Size for one user and assume the rest are idle
  4. Determine per-session CPU/RAM/GPU needs, then aggregate across expected concurrent sessions with headroom Correct answer.

Explanation

VDI sizing for ArcGIS Pro determines the CPU, RAM, and GPU each session needs, then multiplies by the number of concurrent sessions and adds headroom for peaks. ArcGIS Pro is a desktop application that benefits from GPU acceleration, so graphics resources must be included.

Question 29ArcGIS workload capacity, availability and recoverability

A scenario constrains the deployment to a single data center but still requires resilience against a single machine failure. Which design satisfies this within the constraint?

  1. Move entirely to a different cloud provider
  2. Deploy redundant machines per tier within that one data center plus regular backups Correct answer.
  3. Deploy across two geographically separate data centers
  4. Use one machine and accept downtime

Explanation

Within a single-data-center constraint, machine-level resilience is achieved by deploying redundant machines for each tier (portal, server, data store) in that data center and maintaining backups. This protects against single-machine failures even though it does not protect against a full site loss.

Question 30ArcGIS workload capacity, availability and recoverability

Which non-functional requirement would MOST directly drive the decision to place a content delivery cache near end users?

  1. A requirement to support left-handed users
  2. A requirement that the portal logo be blue
  3. A performance/latency requirement for fast map display across geographically dispersed users Correct answer.
  4. A requirement to use a specific font

Explanation

A latency/performance NFR for dispersed users justifies caching content closer to those users to cut round-trip time and WAN load. Recognizing which NFR drives which physical design decision is central to mapping requirements to architecture.

Question 31ArcGIS workload capacity, availability and recoverability

Why is it important to size for PEAK rather than AVERAGE load when designing an ArcGIS Enterprise system?

  1. Average load never changes
  2. Peak periods drive the maximum concurrent demand the system must handle without unacceptable response times Correct answer.
  3. Peak load is always equal to average load
  4. Sizing for peak reduces the number of components needed

Explanation

Systems must remain responsive during their busiest periods, so capacity is sized to peak concurrent demand, not the daily average. Sizing only to average would cause queueing and slow responses during peaks, violating performance NFRs.

Question 32ArcGIS workload capacity, availability and recoverability

During capacity planning, why must the architect distinguish between named-user concurrency and request throughput?

  1. Throughput is only about disk color
  2. Named users determine network cable length
  3. Named users represent the licensed people, while request throughput (requests/hour) drives server core sizing; they are related but not the same Correct answer.
  4. They are identical and interchangeable in every calculation

Explanation

Named users are the licensed people who may access the system, but server core sizing is driven by request throughput (requests per hour) and service time. A few users running heavy requests can generate more load than many users running light ones, so the two metrics must be considered separately.

Question 33ArcGIS Enterprise components, service roles and architecture boundaries

Which ArcGIS Server role/extension should be added when the solution requires hosting and analyzing imagery and raster data at scale?

  1. ArcGIS Notebook Server
  2. ArcGIS Mission Server
  3. ArcGIS GeoEvent Server
  4. ArcGIS Image Server Correct answer.

Explanation

ArcGIS Image Server adds dynamic image services, distributed raster analytics, and orthomapping capabilities for large imagery collections. Identifying the correct server role for a functional need is a core solution-architecture task.

Question 34ArcGIS Enterprise components, service roles and architecture boundaries

A solution must run scheduled Python automation and data science against enterprise GIS content. Which server role fits best?

  1. ArcGIS Web Adaptor
  2. ArcGIS Data Store
  3. Portal for ArcGIS
  4. ArcGIS Notebook Server Correct answer.

Explanation

ArcGIS Notebook Server provides a managed environment to author and schedule Python notebooks for automation, analysis, and data science directly against portal content. It is the correct server role when programmatic, repeatable processing is required.

Question 35ArcGIS Enterprise components, service roles and architecture boundaries

Which solution-architecture decision is required when a deployment must support both public anonymous viewers and authenticated internal editors of the same data?

  1. Disable the portal's identity store
  2. Grant every viewer editing privileges
  3. Use sharing levels and a security design so public users get read-only access while editors authenticate for edit privileges Correct answer.
  4. Make all content private to everyone

Explanation

The architecture should expose read-only content publicly (often through a separate external endpoint) while requiring authentication and edit privileges for internal editors. Sharing levels, roles, and a clear security posture separate the two audiences against the same underlying data.

Question 36ArcGIS Enterprise components, service roles and architecture boundaries

A constraint limits the deployment to a fixed set of licensed components. The solution still needs network analysis routing services. Which adjustment is appropriate?

  1. Remove the data store to free a license
  2. Disable authentication to compensate
  3. Add a brand-new unlicensed server role anyway
  4. Use the licensed capabilities (e.g., publish a network analysis/routing service from the existing GIS Server if licensed for it) within the allowed component set Correct answer.

Explanation

When constrained to a fixed licensed set, the architect satisfies the requirement using capabilities the licensed components already provide, such as publishing routing/network analysis services from a properly licensed GIS Server, rather than introducing unlicensed roles. Solutions must fit within licensing constraints.

Question 37ArcGIS Enterprise components, service roles and architecture boundaries

Which ArcGIS component is required for an organization to publish, search, and manage maps, apps, and layers as a Web GIS portal?

  1. Portal for ArcGIS Correct answer.
  2. ArcGIS Web Adaptor
  3. A standalone load balancer
  4. ArcGIS Data Store

Explanation

Portal for ArcGIS is the component that provides the Web GIS experience: a content catalog, item management, groups, identity, and sharing. It is the central hub through which users discover and use maps, apps, and layers.

Question 38ArcGIS Enterprise components, service roles and architecture boundaries

A solution must integrate ArcGIS Enterprise with an external business system over REST so each system can call the other. Which integration consideration is MOST important to capture in the design?

  1. The favorite color of the integration developer
  2. Authentication/token handling, endpoint URLs, data formats, and error handling between the systems Correct answer.
  3. The number of monitors on the developer's desk
  4. Whether the integration uses a dark or light theme

Explanation

REST integration design must specify how authentication and tokens are exchanged, the exact endpoints, the data formats (e.g., GeoJSON/JSON), and how errors and retries are handled. These define a reliable, secure interface between ArcGIS and the external system.

Question 39ArcGIS Enterprise components, service roles and architecture boundaries

A solution must connect to an existing enterprise geodatabase in a managed RDBMS rather than using the relational data store. Which approach is correct?

  1. Register the enterprise geodatabase (e.g., in a supported RDBMS) as a registered data source with ArcGIS Server Correct answer.
  2. Copy all data into the spatiotemporal store
  3. Replace the RDBMS with a spreadsheet
  4. Disable the data store and serve data from the web adaptor

Explanation

When organizations already manage data in an enterprise geodatabase on a supported RDBMS, that database is registered as a data source with ArcGIS Server so services reference it directly. This reuses existing data management rather than duplicating data into the relational data store.

Question 40ArcGIS Enterprise components, service roles and architecture boundaries

An architect must reduce the components in a design to meet a budget constraint without losing the ability to host feature layers and share maps. Which removal is acceptable?

  1. Remove Portal for ArcGIS
  2. Remove an optional, unused server role such as Mission Server while keeping the base deployment intact Correct answer.
  3. Remove the relational data store
  4. Remove the hosting GIS Server

Explanation

Optional server roles that are not used (for example Mission Server in a deployment with no mission workflows) can be removed to cut cost while the base deployment, which provides hosting and sharing, remains intact. Trimming unused capabilities is a valid way to meet budget constraints.

Question 41ArcGIS Enterprise components, service roles and architecture boundaries

Which ArcGIS Server role/extension is required to support ArcGIS Knowledge graph (link-chart and entity-relationship) workflows in a solution?

  1. Tile cache data store
  2. ArcGIS GeoEvent Server
  3. ArcGIS Knowledge Server (with a graph store) Correct answer.
  4. ArcGIS Web Adaptor

Explanation

ArcGIS Knowledge Server, backed by a graph store, enables knowledge graph and link-analysis workflows that model entities and relationships. Identifying which server role a specialized functional requirement demands is a key solution-architecture skill.

Question 42ArcGIS Enterprise components, service roles and architecture boundaries

An architect must determine licensing requirements for a deployment that needs editing, real-time data, and Python automation. Which statement is correct?

  1. No licensing is needed for any ArcGIS Enterprise component
  2. All capabilities are always free with the base license
  3. Specific server roles (e.g., GeoEvent, Notebook) and user types/extensions must be licensed according to the required capabilities Correct answer.
  4. Licensing depends only on the portal's color theme

Explanation

Capabilities beyond the base deployment require their own licensing: real-time needs GeoEvent Server, Python automation needs Notebook Server, and users need appropriate user types and add-on extensions. Determining licensing requirements from the functional needs is a documented candidate task.

Question 43ArcGIS Enterprise components, service roles and architecture boundaries

An architecture must let internal analysts use ArcGIS Pro against enterprise data while external partners consume read-only web maps. Which design separates these client needs appropriately?

  1. Provide VDI-hosted ArcGIS Pro for analysts inside the network and expose read-only web maps to partners through an external endpoint Correct answer.
  2. Give partners ArcGIS Pro access to the production geodatabase
  3. Require analysts to use only printed maps
  4. Disable the portal for everyone

Explanation

Internal analysts get GPU-enabled VDI ArcGIS Pro next to the data, while external partners receive read-only web maps via a controlled external endpoint. This matches each client type to the right access path and security posture for their needs.

Question 44ArcGIS Enterprise components, service roles and architecture boundaries

Which is the correct order of high-level steps when translating requirements into an ArcGIS Enterprise system design?

  1. Choose a logo, then size the servers
  2. Gather functional and non-functional requirements, design solution/data/security architecture, size capacity, then define infrastructure and validate against NFRs Correct answer.
  3. Buy hardware first, then ask users what they need
  4. Publish services first, then decide the architecture

Explanation

Sound design starts by gathering functional and non-functional requirements, then designs the solution, data, and security architecture, sizes capacity from throughput/service-time inputs, and finally defines infrastructure, validating the whole against the NFRs. Requirements drive design, which drives sizing and infrastructure.

Question 45ArcGIS Enterprise components, service roles and architecture boundaries

A deployment must integrate ArcGIS Enterprise data into an external BI dashboard. Which integration mechanism is most appropriate?

  1. Manually retype attributes into the BI tool nightly
  2. Share the database administrator password publicly
  3. Expose the data through ArcGIS REST/feature services (or OGC endpoints) that the BI tool consumes Correct answer.
  4. Print the data and scan it into the BI tool

Explanation

Publishing the data as ArcGIS REST/feature services (or standards-based OGC services) gives the BI tool a programmatic, governed way to consume up-to-date data. Service-based integration is reliable, secure, and avoids manual data movement.

Question 46ArcGIS Enterprise components, service roles and architecture boundaries

A design must support an air-gapped (disconnected) high-security network. Which deployment consideration is essential?

  1. Require continuous outbound internet access for all components
  2. Depend on a public CDN for all tiles
  3. Use cloud-only deployment
  4. Provision licensing and updates through offline/disconnected methods and avoid reliance on outbound internet calls Correct answer.

Explanation

An air-gapped environment cannot reach the internet, so licensing, updates, and any dependencies must be handled through approved offline/disconnected methods, and the design must avoid components that require outbound internet calls. This is a key constraint for high-security deployments.

Question 47ArcGIS operational evidence, identity and controlled lifecycle changes

Which authentication approach lets users sign in to the portal with their existing corporate accounts via a SAML or OpenID Connect identity provider?

  1. Built-in (portal-managed) accounts only
  2. Enterprise logins configured with the organization's SAML/OIDC identity provider Correct answer.
  3. Anonymous access for all users
  4. A shared single username for the whole organization

Explanation

Enterprise logins integrate Portal for ArcGIS with an organization's SAML or OpenID Connect identity provider, so users authenticate with existing corporate credentials and benefit from single sign-on. Choosing authentication methods to match business and security needs is a solution-architecture skill.

Question 48ArcGIS operational evidence, identity and controlled lifecycle changes

A business requires multi-factor authentication (MFA) for all portal access. What is the recommended way to satisfy this in ArcGIS Enterprise?

  1. Implement MFA at the SAML/OIDC identity provider used for enterprise logins Correct answer.
  2. Ask users to choose strong built-in passwords only
  3. Disable authentication to avoid password fatigue
  4. Store one-time codes in a public web map

Explanation

MFA is enforced at the enterprise identity provider when the portal is configured for SAML or OpenID Connect enterprise logins. The portal delegates authentication to the IdP, so MFA policies defined there apply to portal sign-in.

Question 49ArcGIS operational evidence, identity and controlled lifecycle changes

A scenario requires that internal users authenticate with Windows accounts seamlessly when accessing the portal from domain-joined machines. Which method supports this?

  1. Anonymous access
  2. Built-in accounts with no integration
  3. A printed list of passwords
  4. Integrated Windows Authentication (IWA) via the web tier / enterprise logins Correct answer.

Explanation

Integrated Windows Authentication, configured at the web tier with enterprise logins, allows domain-joined users to be authenticated automatically using their Windows credentials, providing seamless single sign-on for internal access.

Question 50ArcGIS operational evidence, identity and controlled lifecycle changes

A solution requires PKI certificate-based authentication for high-security users. At which layer is this typically configured?

  1. Inside each published web map
  2. On the end user's wallpaper settings
  3. In the tile cache directory
  4. At the web tier / reverse proxy fronting the portal, which validates client certificates Correct answer.

Explanation

PKI (client certificate) authentication is configured at the web tier or reverse proxy in front of the portal, which validates the client certificate before passing the authenticated identity to ArcGIS Enterprise. This satisfies high-assurance authentication requirements.